Freely subscribe to our NEWSLETTER

Talos, Cisco’s industry-leading threat intelligence organisation has identified an out of bounds vulnerability in Apple’s music creation program, GarageBand.

GarageBand allows users to create and edit music easily and effectively and is installed by default on all mac computers so there is a significant number of people affected.

This particular vulnerability is the result of the way the application parses the proprietary file format used for GarageBand files, .band. The format is broken into chunks with a specific length field for each. This length is controlled by the user and can be leveraged to expose an exploitable condition. This vulnerability could be exploited by a user opening a specially crafted .band file.